It's mainly used in Europe. The US has a very similar, but older protocol called ANSI C12. The C12.22 spec includes authenticated encryption, but I'm not familiar with the details.
[1] http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/propose... [2] http://eprint.iacr.org/2012/018.pdf